With the rapid development of cloud manufacturing technology and the new generation of artificial intelligence technology,the new cloud manufacturing system(NCMS)built on the connotation of cloud manufacturing 3.0 pre...With the rapid development of cloud manufacturing technology and the new generation of artificial intelligence technology,the new cloud manufacturing system(NCMS)built on the connotation of cloud manufacturing 3.0 presents a new business model of“Internet of everything,intelligent leading,data driving,shared services,cross-border integration,and universal innovation”.The network boundaries are becoming increasingly blurred,NCMS is facing security risks such as equipment unauthorized use,account theft,static and extensive access control policies,unauthorized access,supply chain attacks,sensitive data leaks,and industrial control vulnerability attacks.Traditional security architectures mainly use information security technology,which cannot meet the active security protection requirements of NCMS.In order to solve the above problems,this paper proposes an integrated cloud-edge-terminal security system architecture of NCMS.It adopts the zero trust concept and effectively integrates multiple security capabilities such as network,equipment,cloud computing environment,application,identity,and data.It adopts a new access control mode of“continuous verification+dynamic authorization”,classified access control mechanisms such as attribute-based access control,rolebased access control,policy-based access control,and a new data security protection system based on blockchain,achieving“trustworthy subject identity,controllable access behavior,and effective protection of subject and object resources”.This architecture provides an active security protection method for NCMS in the digital transformation of large enterprises,and can effectively enhance network security protection capabilities and cope with increasingly severe network security situations.展开更多
文摘With the rapid development of cloud manufacturing technology and the new generation of artificial intelligence technology,the new cloud manufacturing system(NCMS)built on the connotation of cloud manufacturing 3.0 presents a new business model of“Internet of everything,intelligent leading,data driving,shared services,cross-border integration,and universal innovation”.The network boundaries are becoming increasingly blurred,NCMS is facing security risks such as equipment unauthorized use,account theft,static and extensive access control policies,unauthorized access,supply chain attacks,sensitive data leaks,and industrial control vulnerability attacks.Traditional security architectures mainly use information security technology,which cannot meet the active security protection requirements of NCMS.In order to solve the above problems,this paper proposes an integrated cloud-edge-terminal security system architecture of NCMS.It adopts the zero trust concept and effectively integrates multiple security capabilities such as network,equipment,cloud computing environment,application,identity,and data.It adopts a new access control mode of“continuous verification+dynamic authorization”,classified access control mechanisms such as attribute-based access control,rolebased access control,policy-based access control,and a new data security protection system based on blockchain,achieving“trustworthy subject identity,controllable access behavior,and effective protection of subject and object resources”.This architecture provides an active security protection method for NCMS in the digital transformation of large enterprises,and can effectively enhance network security protection capabilities and cope with increasingly severe network security situations.
文摘尾矿坝是金属非金属矿山必要的生产和环保设施,也是人造泥石流危险源,如何充分发挥新一代信息技术优势,解决尾矿坝智能安全管理中的数据孤立化、信息孤岛化和应用离散化等问题已成为亟待解决的难题。介绍了尾矿坝数字孪生(Digital Twin of Tailings Dam,DTTD)的内涵,利用尾矿坝物理模型、传感器数据、运行历史数据等多源信息,在虚拟空间中构建尾矿坝及其运行环境的精确数字模型,实时动态反映尾矿坝实际运行状态、行为、功能和性能,为尾矿库安全管理提供决策支持。阐述了尾矿坝数字孪生六维模型,总结了尾矿坝数字孪生“形性关联、算测融合、虚实交互、两体一化”的特征,从基础支撑层、模型构建层、仿真分析层和功能应用层4个层面搭建了尾矿坝数字孪生系统架构。剖析了尾矿坝数字孪生涉及的关键技术及应用场景,以期实现尾矿坝物理实体与虚拟模型的交互共融,达到安全风险智能感知与精准动态预警的目标。DTTD的应用将支撑尾矿坝安全管理的感知、表达、监测、模拟、仿真、预测与控制,有望显著提高尾矿库智慧化安全管理效能。